31d5cc1d55b5c6982ddb8e15a8ffb051_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d5cc1d55b5c6982ddb8e15a8ffb051_JaffaCakes118
Size

329KB
MD5

31d5cc1d55b5c6982ddb8e15a8ffb051
SHA1

07b43b85d960436dcc8cc361a8765913715edcf1
SHA256

2d2125623bcc58b2a83512c90f6945e393384d88435d315379b0cabccca84cfe
SHA512

3eb40d99b8c41cc266df5ffd4bb22d03ef0b43d7a120d7b6de4624a0351ba30405f159478e3cf454f338bd00cf92a4393105d35f3030acf109d4a5e69c096e0e
SSDEEP

6144:Pd7kKbsu5MQzTECh5ESUMq87c8eSGUTncUpHXbyAUnv1CORiJtzF:OKbsiT/ECh5drhwbUxXWAYvoORslF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d5cc1d55b5c6982ddb8e15a8ffb051_JaffaCakes118

Files

31d5cc1d55b5c6982ddb8e15a8ffb051_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f21e05129dc91033c5f7f93bbcfb525c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vnxr7kx.
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jn9t31i.
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ